{
  "log": {
    "level": "info",
    "timestamp": true
  },
  "dns": {
    "servers": [
      {
        "type": "udp",
        "tag": "bootstrap-dns",
        "server": "1.1.1.1",
        "server_port": 53,
        "bind_interface": "eth0"
      },
      {
        "type": "https",
        "tag": "remote-dns",
        "server": "1.1.1.1",
        "server_port": 443,
        "path": "/dns-query",
        "tls": {
          "enabled": true,
          "server_name": "cloudflare-dns.com"
        },
        "detour": "hy2-out"
      }
    ],
    "final": "remote-dns",
    "strategy": "ipv4_only"
  },
  "inbounds": [
    {
      "type": "tun",
      "tag": "tun-in",
      "interface_name": "tun-sb0",
      "address": [
        "172.19.0.1/30"
      ],
      "mtu": 1400,
      "dns_mode": "hijack",
      "auto_route": true,
      "iproute2_table_index": 2022,
      "iproute2_rule_index": 9000,
      "auto_redirect": true,
      "auto_redirect_input_mark": "0x2023",
      "auto_redirect_output_mark": "0x2024",
      "auto_redirect_reset_mark": "0x2025",
      "auto_redirect_nfqueue": 100,
      "auto_redirect_iproute2_fallback_rule_index": 32768,
      "strict_route": true,
      "stack": "mixed",
      "route_exclude_address": [
        "10.20.0.0/24",
        "10.30.0.0/24",
        "127.0.0.0/8"
      ]
    }
  ],
  "outbounds": [
    {
      "type": "hysteria2",
      "tag": "hy2-out",
      "server": "fi.api.withen.pro",
      "up_mbps": 50,
      "down_mbps": 200,
      "password": "AUTH",
      "tls": {
        "enabled": true,
        "server_name": "fi.api.withen.pro",
        "insecure": false
      },
      "bind_interface": "eth0",
      "domain_resolver": {
        "server": "bootstrap-dns",
        "strategy": "ipv4_only"
      },
      "server_port": 443,
      "obfs": {
        "type": "gecko",
        "password": "OBFS",
        "min_packet_size": 512,
        "max_packet_size": 1200
      }
    }
  ],
  "route": {
    "auto_detect_interface": true,
    "default_domain_resolver": {
      "server": "bootstrap-dns",
      "strategy": "ipv4_only"
    },
    "final": "hy2-out"
  }
}